angular-cli
- Software type
- Developer tool
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/07/2026, angular-cli recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of angular-cli and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-104871Path traversal exposes sibling prerendered pages in Angular SSRCVE-2026-44437Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-PrefixCVE-2026-33397Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash BypassCVE-2026-27739Header-trust SSRF in Angular @angular/ssr enables internal request steeringCVE-2026-27738Angular SSR has an Open Redirect via X-Forwarded-Prefix| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-104871Path traversal exposes sibling prerendered pages in Angular SSR | Exploitation statusNot exploited | FixYes | Published10/02/2026 | SeverityMedium |
CVE-2026-44437Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix | Exploitation statusNot exploited | FixNo | Published05/13/2026 | SeverityMedium |
CVE-2026-33397Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass | Exploitation statusNot exploited | FixNo | Published03/26/2026 | SeverityMedium |
CVE-2026-27739Header-trust SSRF in Angular @angular/ssr enables internal request steering | Exploitation statusNot exploited | FixNo | Published02/25/2026 | SeverityCritical |
CVE-2026-27738Angular SSR has an Open Redirect via X-Forwarded-Prefix | Exploitation statusActively exploited | FixNo | Published02/25/2026 | SeverityMedium |
CVE-2025-62427Server-Side Request Forgery in Angular SSR via Malicious URL Resolution | Exploitation statusActively exploited | FixYes | Published10/16/2025 | SeverityHigh |
6 Results | Page 1 of 1